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Abstract 

O ' In this paper, we investigate separation properties and related bounds of 

some codes. Firstly, we obtain an existence result for (i_i, W2) —separating 
codes and discuss the "optimality" of the upper bounds. Secondly, we pro- 

^ I pose an upper bound on the size of restricted (w,w)— separating codes. 

Thirdly, we integrate former results and some new conditions for Silver- 

pq , berg's open problem into an algebraic version, and end with an interesting 

relationship between separation and existence of non-trivial subspace sub- 
code of Reed-Solomon codes. 
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1 Introduction 

1.1 Digital Fingerprinting 

The growth of Internet raised the problem of illegal redistribution as a major concern in 
digital content industry, because copying such material is easy and no information is lost 
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in the process. To protect digital copies, however, is a complicated task. Methods like 
cryptography do not resolve this problem, since the information must be decrypted at one 
point to be able to use it. The goal of digital fingerprinting is to discourage people from 
illegally redistributing their legally purchased copy. In this scenario, the distributor em- 
beds into the digital content, using a watermark algorithm, a unique piece of information 
(fingerprint) for each user. If an illegal copy is found, the distributor can extract the fin- 
gerprint from it to identity a dishonest user (pirate). Because the pirate may try to damage 
the fingerprint before redistribution, the watermarking algorithm must ensure robustness 
to the distributor. 

Nevertheless, the most dangerous attack against digital fingerprinting is a collusion 
attack. The contents delivered to different users are, since their fingerprints differ, essen- 
tially different. Two or more pirates may compare their copies and reveal the locations 
of part of fingerprint. With deleting or modifying those locations, pirates can generate a 
new copy of content in order not to be traced. This collusion attack could not only vi- 
olate pirate-identifying but frame an innocent user in some cases. We are interested in 



designing a set of fmgerprintsijingerprinting code) with which the distributor can always 
identity at least one colluder from a forged fingerprint with a small error probability. 

1.2 Definitions and Basic Results 

We will denote the ith component of any tuple x by Xi and the Hamming distance between 
two tuples x, y by d(x, y). 

A set T C F™ is called a q—ary (n,M)-code or (n,M) q —code if |T[ = M. An 
[n, k] q — linear code is a linear subspace of F™. R := n _1 log M is called a rate of code. 
For an arbitrary nonempty subset U of a q—ary code, we define detectable position set, 
descendant set and feasible set by the followings. 

detU := {i E T~n \3a,b EU : cii ^ 6;} 
descU := {x E F™ \Vi,3a E U : x> = a{\ 
fe&U := {x E F™ | i (£ detU => Xi = a,i, a E U} 

We now give the following definitions concerning collusion- secure properties of codes. 

Definition 1.1 Suppose T is an (n, M) q — code and w, wi,u>2 are positive integers. 

• T is a (w\,W2)— separating code provided that, if U±, U2 are disjoint subsets of T 
such that 1 < \Ui\ < W\ and 1 < IC/2I < ^2» then their descendant sets are also 
disjoint. 

• T is a restricted {w\,W2)— separating code provided that, if U\,U2 are disjoint 
subsets of T such that 1 < \U\\ <W\ and 1 < [C/2I < w>2, then their feasible sets 
are also disjoint. 

• w—frameproof code(FP code, shortly) is a (w, w)— separating code. 

• T is called a w— identifiable parent property code(IPP code, shortly) provided that 
for all x E F™, the set lPP w (x) := {U C T | x E descU, 1 < \U\ < w} is empty 
or fl U?4>. 

UClPP w (x) 

• T is called a w—traceability code(TA code, shortly) provided that, if U C T, 1 < 
\U\ < w and x € descU, there is at least one codeword y E U such that d(x, y) < 
d{x, z) for all z E T\U. 

The intuitive meanings of FP, SFP, IPP and TA properties are as follows. 

• A code is w— FP if no coalition of size at most w can frame another user not in the 
coalition by forging the codeword of that user. 

• A code is w— SFP if no coalition of size at most w can frame a disjoint coalition 
of size at most w by forging a codeword which could have been produced by the 
second coalition. 



• A code is w— IPP if no coalition of size at most w can forge a codeword that cannot 
be traced back to at least one member of the coalition. 

• A w— TA code is a w— IPP code with a fast tracing algorithm based on Hamming 
distance. 

The code classes stated above are known to satisfy the following relationships. 

Proposition 1.1 (see [ 12]) Let d be the minimum distance of(n, M) q —code V and w > 2 
be a positive integer. Then for T, 

d > n(l - 1/w 2 ) ^w-TA^w- IPP => w - SFP => w - FP 

Proposition 1.2 (see [2]) Let d be the minimum distance of (n, M) q —code T and w\ , u>2 
be positive integer. If d > n(l — \/{w\W2J), then T is a (wi, u^) — separating code. 

Separating codes have been studied with combinatorial methods in many works. An 
(N;n,m, {wi,W2})— separating hash family(or SHF) is a set of N functions ^, such 
that \Y\ = n, \X\ = m, f : Y — > X for each / G \£, and for any disjoint subsets 
Ci,C2 C Y with \C\\ = w\ and |C 2 | = W2, there exists at least one / € \& such 
that Ii := {/(y) | y G Ci},i G 1,2 are also disjoint with each other. The following 
proposition shows that SHF is an equivalent concept with separating code in some sense. 

Proposition 1.3 An (n, M) q — code is (w\, W2)— separating if and only if its matrix rep- 
resentation is equal to the one of (n; M, q, {w± , W2})—SHF where M >w\ + W2- 

The bounds on SHF depend on values of certain chromatic polynomials. Given a graph 
G = (V,E), the chromatic polynomial vr(G, m) is defined as follows : For a positive 
integer m, tt(G, m) denotes the number of m— colorings of G(i.e., the number of ways 
to color the vertices of G using a specified set of m colors, such that no two vertices 
t>i,t>2 € V having the same color are joined by an edge e G E). It is well-known 
that ir{G,m) is a polynomial in m of degree \V\. Theorem 1.1 shows the properties of 
n(G,m). 

Theorem 1.1 (see BIOID Let G be a graph on v vertices and e edges. Then, 

• the degree ofn(G, m) is v, 

• the coefficient ofm v in vr(G, m) is 1, 

• the coefficient ofm v ~ l in ir(G, m) is —e, and 

• the coefficients of7r(G, m) alternate in sign. 

Reed-Solomon code, we will define below, is one of the most famous error-correcting 
codes and has an application in digital fingerprinting also. 

Definition 1.2 Let a be a primitive element of ¥ q . Reed-Solomon code RSk(q) is a 
[q — 1, k] q — linear code RSk(q) := {ev{f) \ f G ¥ q [x],de.gf < k — 1} where ev is an 
evaluation map ev : f h-» (f(a), f(a 2 ), ■ ■ ■ , f(a q ~ 1 )). 

In coding theory, it is well-known that Reed-Solomon code is Maximal Distance Seper- 
able code that attains the Singleton Bound with equality. Thus, d = q — k where d is 
minimum distance of RSk(q). 



1.3 Previous Works 

Since separation property plays an important role in collusion-secure digital fingerprint- 
ing, lots of earlier works were done in the literature. 

J. Staddon, et al. 02] studied the upper bound on the size of w— SFP codes T < 
q' n ' w '+2w—2. D. Stinson, etal. JT4] improved the bound in case w = 2. Their result was 
T < 4gr™/ 3 l — 3. D. Stinson, et al. lfT5l extended this bound to more general cases. The 
study was in SHF version and it claimed T < (2w 2 - 3w + 2)<^ ri /( 2 «'- 1 )l - 2w 2 + 3w - 1 
for w- SFP codes and T < (2w 2 -5w+4)q^ ( - 2w - 2 ^ -2w 2 +5w-3for (w,w-l)- sep- 
arating codes. The nonconstructive bounds, or existence conditions for separating codes 
have been studied. D. Stinson, et al. lfT3l achieved the following result. 



Theorem 1.2 Suppose n,m,wi and W2 are all positive integers and g = l—ir(K Wl ' W2 ,m)/m Wl+w ' 2 
where W" 1 ' W2 is the complete bipartite graph with w\ vertices in one part and w<i ver- 
tices in other part. If N > wlog n^ 1 or N > (w — l)log (2n) _1 , then there exists an 
(JV; n,m, {wi,W2})—SHF. 

The similar study was done by D. Deng, et al. |4j]. Their result is as follows. 

Theorem 1.3 There exists an (N; n, m, {wi,W2})—SHF if 



N > ^^ 



n—u>\—W2\ (n—2w\—u>2 
w 2 



-logs' 

where g = l- ir(K wl ' W2 ,m)/m Wl+W2 . 

Since restricted separation property provides colluders with more ability to attack, it has 
wider application than separation. But not as for separating codes, the bound on the size 
of restricted separating codes has not been widely studied. The only result on that topic 
we could find in the literature is Theorem 1.4 below by A. Barg, et al. iPTI . 

Theorem 1.4 Let a > 0. Infinite sequences of restricted (2,2)— separating codes exist 
for all rates R such that R + a < — 3 _1 log (1 — (q — l)/q 3 ). 

For Reed-Solomon codes have certain collusion-secure properties, A. Silverberg, et al. 
Ifm researched on applying Reed-Solomon codes and their list decoding algorithm to 
digital fingerprinting issue. During that discussion, they could gain some clues which led 
them to the following open problem. 

Question 1 Is it the case that d > n — n/w 2 for all w—IPP Reed-Solomon codes of 
length n and minimum distance d? 

By Proposition 1.1, we can see that if Question 1 is answered "yes", w—IPP is an equiv- 
alent condition with w— TA for Reed-Solomon code family. Question 1 was studied in 
0, O. J. Moreira, et al. [9| proved that if w divides q, then d > n — n/w 2 for 
all w— SFP Reed-Solomon codes, therefore, w— SFP implies w— TA for Reed-Solomon 



codes. M. Fernandez, et al. ||6) worked on the same topic to show that if n — d divides 
n, (w\, W2)— separation implies d > n — n/{w\W2)- In that spirit, we can naturally sug- 
gest the question about necessary and sufficient condition of separation for Reed-Solomon 
codes as follows. (Sufficient condition comes from Proposition 1.2.) 

Question 2 Is it the case that d > n — n/{w\W2) for all (101,102)— separating Reed- 
Solomon codes of length n and minimum distance d? 

We begin in Section 2 by introducing an existence result for (w\, W2)— separating codes 
and discuss the "optimality" of the upper bounds. In Section 3, an upper bound on the size 
of restricted (w, w)— separating codes is obtained. We discuss Question 1 and Question 
2 in Section 4. We will give some results about the conditions under which Question 2 
holds positive answer both in general and intuitive versions. In the final Section, we will 
give conclusion and aspects for further works. 

Through the rest of the paper, w\ and W2 are positive integers. ¥ q is a Galois field of 
characteristic p and order q = p m . For an additive group G, the set G\{0} is denoted by 
G*. For arbitrary two subsets A, B C ¥ q , we define AB := {ab \ a G A, b G B} and 
A + B := {a + b \ a G A, b G B}. 

2 Existence Result for Separation 

As we discussed in the previous section, the recent strong upper bounds on the size of 
(wi,W2)— separating codes have the identical form |T| < / • q e + h, where e, / and h 
are functions in w\ and W2- It's easy to see that the major contribution to the bound is 
due to q e , when q increases, and h could be tolerated in some sense. D. Stinson, et al. 
lfl"5l suggested the upper bound with e = \n/{w\ + W2 — 1)]. In this section we are 
attempting to answer the question "How much is it possible to improve e?". The main 
result is Theorem 2. 1 stated below. 

Theorem 2.1 For all real number r < n/(w\ + u>2 — 1), there exist infinite sequence of 
(wi,W2)— separating q—ary codes of length n with more than q r codewords. 



Proof Set 

<0(M) 



M\ (M - w{\ (M -w\- w 2 \ (M - 2wi - ■wV 
w\) \ w 2 J \ w\ )\ w 2 

{wi\w 2 \y l {M{M - 1) • • • (M - wt - w 2 + 1) - 
(M-wi- w 2 )(M - wi - w 2 - 1) • • • (M - 2wi - 2w 2 + 1)) 



If we expand ip(M), we get a polynomial of degree w\ + w-i — 1. The leading coefficient 
is [w\ + W2) 2 jv and the next coefficient is negative where v = w\\w2\- Therefore there 
exists M such that aM w ~ l > (w t + w 2 ) 2 M w - 1 /v > ij){M) for all M > M where 
a = (wi+ W2) 2 /(wiwi). 

Set p(q) := q w ^ +w 2 — 7r(K Wl,W2 ,q). Theorem 1.1 implies that p is a polynomial in q 



of degree W1+W2 — 1, its leading coefficient is the number of edges of K Wl ' W2 , thus, u>iu;2 
and the next coefficient is negative. Therefore, there exists qo such that w\W2q Wl+W2 ~ l > 
p(q) for all q > go- 
Now set 

e := n/(wx + w 2 — 1) — r, 
c ■= (e(w 1 +w 2 ) 2 (w 1 W2) n ~ 1 ) 1/iwi+W2 ~ 1) and 
q' := max{g , [M 1/r ] + 1, [c 1 ^] + 1}. 

Then, for all q and M such that g > q',q r < M < c -ig»»/(«'i-H«2-i) > t h er e exist 
(n,M) 9 — code which is (^1,^2)— separating. In fact, q > q' > c 1 ' 6 implies g r + 1 < 
c -i^n/(wi+«)2-i) ) so j t j s a i wa y S possible to choose M as above. Moreover, aM 1 " -1 > 
i/)(M) since M > q r > (q') r > M , w 1 w 2 qr w i+ t «- 1 > p(g) for q > q' > q , and 
therefore the followings hold true. 

et/)(M) < eaM Wl+W2 ~ 1 

< e ■ (wi + w 2 ) 2 /(w\w 2 ) ■ q n /{e ■ (u>i + w 2 ) 2 ■ {wiW2) n ~ 1 ) 
= (q/( Wl W2)T 

< (q Wl+W2 /p(q)T 

It meets the conditions of Theorem 1.3, thus, we get the conclusion. □ 

From Theorem 2. 1 we can see that e cannot be improved better than n/(w\ +W2 — 1), 
and \n/(wi + W2 — 1)] obtained in [15] is "optimal" when we consider e integral. So 
reducing the amount of / seems promising in later studies for upper bounds. 

3 Necessary Condition for Restricted Separation 

In this section we propose a bound on the size of restricted (w,w)— separating codes. 
Note that the bound is independent on alphabet size q. 

Theorem 3.1 Let w > 3 be a positive integer. If C is a code of length n with M code- 
words and satisfies restricted (w, w)— separation property, then M < 2^ n ~ w+2 '' 2 ^ +w — 
2. 

Proof. Choose an arbitrary subset UofC with w— 2 codewords, say U = {x^ l \ x^ 2 \ ■ ■ ■ , x( w ~ 2 ) }. 
We can assume that the distance between x^ and x^ is larger than one without gener- 
ality. (It can be easily checked that there exist such two codewords by using definition 
of restricted separation property.) Then, there exist two coordinates io,h € l,n such 
that x\ ^ x\ and x\ ^ x\ . According to the definition of restricted separa- 
tion property, x^> & feadx*- 1 - 1 ,x^}). Therefore, there exists a coordinate i 2 € l,n 
such that x\ = x\ ^ x- , and it is obvious that in,ii,i 2 are different with each 
other. One can continue such steps to get different coordinates io,ii, ■ ■ ■ ,i w -3 where 



x- = x- ■ ■ ■ = x- ^ x) for all < k < w — 3. Thus, if we denote the number of 
all coordinates on which every codeword of U agrees by d, then d < n — w + 2. 

We can assume that the all the elements of U coincide on and only on the first d 
coordinates. Let us set S := {1,2,- •• ,d} and define a mapping F(y) := {i G S \ 

Vi = x i } (^ S f° r ai l 2/ € C\f7. If y,z,t G C\C7 are distinct elements, then the 
followings are true : (1) T(y) n T(z) ^ <j>, (2) T(y) £ T{z), (3) T(y) U T(z) ^ S, 
(4) T(y) n T(z) £ T(t) and (5) T(t) <£_ T(y) n T(z) since their negations imply (a) 
fea(C/U{y, z}) = F£, (b) fea(£/U{y})nfea([/U{z}) = {z}, (c)fea([/)nfea({y,z}) / 0, 
(d)fea([/U{y,z})nfea({t}) = {£} and (e) fea(77U{i}) nfea({y, z}) / ^respectively, 
which all contradict the restricted (w, u>)— separation property. 

CASE I: Assume that there exists y(°) G C\Z7 such that \T(y^)\ < [d/2\. For all 
y G C\C/, define the correspondence r'(y) := T(y) n r(yW). Then T' is an injection 
since (4). For V maps C\U to r(y<M ) of at most [d/2\ elements, we get \C\U\ < 2 L^/ 2 J . 

CASE II: Assume that for all y G C\C/, |r(y)| > L<^/2j. SetTi(y) := S\T(y), then 
Ti also satisfies (1) - (5). Similarly as above, we get \C\U\ < 2 L rf / 2 J , 

From the two results above, \C\ = \U\ + \C\U\ < 2^ n ~ w+2 ^ 2 ^ + w - 2. B 

4 Separation for Reed-Solomon codes 

In this section, we study Silverberg's open problem Question 1 and its generalized version 
Question 2. First, we state the following sufficient condition of non-separation for linear 
codes which can integrate the previous results in [6], ||9]. 

Theorem 4.1 Let C be an [n, k] q — linear code containing 1= (1, 1, • • • , 1). Suppose 
there exists a codeword c = (ci, oz, ■ ■ ■ , c n ) € C such that V(c) > 2 where V(c) := {cj} 
and there are subsets E, F C V(c)(l < \E\ < w±,l < \F\ < u>2 satisfying V{c) = EF 
or V(c) = E + F. Then, C is not (w\, u>2)— separating. 

Proof. We will only prove when V(c) = E + F, since the other case can be proven in 
similar way. Define U := {(3 ■ 1 | /3 G E} and V := {c - 7 • 1 [ 7 G F}. Then 
U, V C C since c, 1 G C and C is a linear code. Further, U and V are disjoint because 
|V(c)| > 2. For alH G l,n, there exist /% G F and 7, G F such that Cj = /?* + 7j. If 
we set x := (/3i, /?2, • • ■ , /3 n ), then one can easily check that x G desct/ n descF which 
implies non-separation. □ 

For Reed-Solomon code is a linear code containing 1, we get the following corollary. 



Corollary 4.1 Let f be a non-constant polynomial of degree less than k and denote the 
image of f by Im/. Suppose there exist two subsets E, F C Im/ such that 1 < |.E| < 
w\, 1 < \F\ < W2» o^d either Im/ = E + F or Im/ = EF z's frae. TTjen, ?/je co<ie 
RSfc(g) w «o? (wi, W2)— separating. 



As one can see in the following examples, Theorem 4.1 or Corollary 4.1 includes the re- 
sults in O, O as special cases. 

Example 1 : Suppose n — d divides n, in other words, k — 1 [ q — 1 for RSfc(g) 
where d is minimum distance. If the condition d > n(l — l/(wiW2)) fails, then k — 1 > 
(q — \)/{wiW2). Set / := x k ~ 1 . Then / is a multiplicative homomorphism from F* to F* 
So Im/ is a subgroup of F* with order |Im/| = |F*|/|Ker/| = (q - l)/(k - 1) < wiw 2 . 
For F* is cyclic, Im/ is also cyclic, thus, it has a generator 7. Set S := {^ lW2 | < i < 
W\ — 1} and i 7 := {7 J [ < j < t«2 — 1}. /, E, and F satisfy the condition of Corollary 
4.1 so that RSfe(g) is not (w\, 1V2)— separating. 



Example 2 : Assume tu | q and fc — 1 > (q — l)/w 2 . The polynomial / := 



r q/w 2 



is an additive homomorphism over ¥ q and |Im/| = w . By finite group theory, there 
exist subgroups E,F < Im/ with w\,W2 elements such that Im/ = E + F. Thus, from 
Corollary 4.1 the code RSk{q) is not (w±, W2)— separating. 

The following theorem states a new parameter configuration for holding Question 2 
positive. 

Theorem 4.2 Suppose k — 1 | q and at least one of the following conditions (l)-(3) are 
true. Then, d > n(l — 1 / {w\W2)) for all (wi,W2)— separating RSk(q)- 

(1) k — 1 > pq/(wiw 2 ) 

(2)(w 1 /p^)-(w 2 /p r2 )< P 

0) H/p ri ] • KM 2 ] > p 

where r^ = [log -u^] a«<i (i is minimum distance. 

Proof. Let us suppose that d < n(l — l/(w\W2)), namely k — 1 > (q — l)/(wiW2) in 
spite of {wi,W2)— separation of RSfc(g) where k — 1 \ q. Set / := x k ~ 1 — x. Then the 
similar discussion with Example 2 leads us to jlm/| = q/(k — 1). 

Assume (1) is true. Then |Im/| = q/(k — 1) < w\W2Jp < p Tl+r2 and there exist 
ti,t2(t\ < w\,t2 < W2) such that |Im/| = p tl+t2 for |Im/| is a power of p. Using group 
theory, we find that there exist subgroups of Im/, say E and F such that Im/ = E + F 
and |.E| = p fl ,\F\ = p 1 ' 2 . Thus, it contradicts the separation property from Corollary 4.1. 

Assume (2) is true. We get |Im/| = q/(k — 1) < W1W2 < p r ' 1+T2+1 and since |Im/| 
is a power of p, |Im/| < p ri+r2 . Then the exactly same argument as above holds. 

Assume (1) and (2) are false, and (3) is true. Failure of (1) tells q/{w\W2) < k — 1 < 
pq/(w\W2) and W1W2 > p ri+r2+1 since (2) is false and p is a prime number. Therefore, 
we could get p ri+r2 < w\W2Jp < |Im/| = q/(k — 1) < W1W2 < p Tl+r2+2 . So 
|Im/[ = p r 'i+ r 2+ 1 for |Im/| is a power of p. Then there exist E, F and P with orders 
p ri , p r ' 2 and p, respectively, such that Im/ = E+F+P. Moreover, P is cyclic for its order 
is a prime number. We denote the generator of P by 7. Similarly with Example 1, set 
Pi ■= {{i ■ [w 2 /p r2 ]h \0<i< [wi/p P1 ] - 1} and P 2 := {{n I < j < [w 2 /p r2 ] - 1}. 
Since (3), we get P = P 1 + P 2 and Im/ = (E + P ± ) + (F + P 2 ). The cardinality of 
E + Pi and F + P2 are obviously not larger than wi and u>2, respectively. Therefore, by 
Corollary 4. 1 we get the contradiction also in this case. El 



Proposition 4.1 Suppose that W\W2 > q or W1W2 \ q — 1. Then d > n(l — l/f^ii/^)) 
for all (w 1, W2)— separating RSfc(g). 

Proo/! Suppose W1W2 > 9- Then (q — l)/{w\W2) < 1. By Example 1, RS2(<z) is not 
(101,^2) — separating. Since RSfc(g) C RSfc + i(g) for all k, non-separation of RSk(q) im- 
plies non-separation of RSfc + i(g). Therefore, if k — 1 > (q — l)/(w\W2), then RSfc(g) 
is not (w\,W2) — separating. Incase when w\ W2 \ q—1 we can prove with the same way. □ 

Experimental results allow us to answer Question 2 positive for a large family of 
Reed-Solomon codes. (J. Moreira, et al. [9 ] constructed a table illustrating some families 
of Reed-Solomon codes covered by positive answer using the results of Example 1 and 
Example 2.) 

The statement of Theorem 4.1 and the proof of Theorem 4.2 give us a hint to describe 
the condition of "yes" on Question 2 in algebraic way. To show that, we will revisit 
the concept of subspace subcodes motivated and studied by P. Delsarte J3), J. Jensen 
(HI, M. Hattori, et al. [7] and M. Dijk, et al 0. Given an [n, k] q -linear code C and a 
v— dimensional subspace 5(0 < v < m) of ¥ q where q = p m , subspace subcode Cs of C 
is defined to be the set of codewords from C whose components all lie in S. It is obvious 
that Cs is a linear code over F p . From the definition, the code spanned by 1 is a subspace 
subcode of dimension one. We call this code a trivial subspace subcode. 

Before relating Question 2 to subspace subcodes, we define the following number 
theoretical function H p where p is a prime number. 

n < p 2 and n ^ p 
H p {n) := I log p n n is a power of p , n€N 

- 1 otherwise 



Theorem 4.3 Suppose W1W2 < q = p m and v = H p (w\W2) > 0. If there exist a 
v— dimensional subsace S of¥ q and non-trivial subspace subcode Cs of C = RSk(q), 
i.e., dim(Cs) > 2, then the parent code RSk(q) is not (wi, W2)— separating. 

Proof. For Cs is not trivial, we can choose a codeword c in Cs which is not a multiple of 
1. Thus, V(c) C S, and \V(c) \ > 2. Let us use the notations of Theorem 4.2. If w\W2 is 
a power of p, \S\ = p v = W1W2 and it is not difficult to check that the similar argument 
in Example 2 can be applied to show that RSfc(q) is not (wi, 1V2)— separating. If w\W2 is 
not a power of p, then p v = p^ °Sp n J -1 < p ri+T2 . Therefore, we can prove non-separation 
of RSfe(g) in the similar way with the proof of Theorem 4.2 (1) or (2). □ 

To make Theorem 4.3 valid, we must get the existence condition of non-trivial sub- 
space subcode Cs which is linear. The dimension of subspace subcode has been studied in 
many works. M. Hattori, et al. [7 ] proposed an explicit formula as well as a simple lower 
bound for the dimension of subspace subcodes of Reed-Solomon codes where p = 2. For 
fixed m and v, they proved that most of subspace subcodes meet the very lower bound 
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with equality. They called the subspace on which dimensions of all the subcodes don't 
meet the lower bound exceptional. It is clear that exceptional subspaces are the ones we 
are looking for. 

5 Conclusions 

Properties of separating codes and the bounds on their cardinality, code length or di- 
mension are important topics in digital fingerprinting code theory and so many problems 
remain open. 

In this paper, we illustrated that in the upper bound formula on the size of [w\ , W2 ) —separating 
codes the index of exponent should be larger than n/(wi + W2 — 1). Therefore, the 
improvement of the index seems to be accomplished between n/{w\ + u>2 — 1) and 
\n/(w\ +w 2 - 1)]. 

Restricted separation is quite strong condition so that the upper bound on the code 
size is supposed to be still smaller than the bound for separating codes. In that spirit, 
Theorem 3.1 leaves much to be desired. 

Study on the relationship between separation and dimension for Reed-Solomon codes 
in the paper integrated the former results and some new conditions into an algebraic ver- 
sion using Theorem 4.1, and ended with the interesting result related to subspace sub- 
codes. If we know the condition under which exceptional arises, Theorem 4.3 seems to 
be able to provide with a good hint for Silverberg's open problem. 
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